Profiling isn't a dirty word, it's a sensible practice. If 80% of your attacks are coming from a certain geographic location should you A) adjust your risk policy to suit B) put your head in the sand and pretend you live in Narnia?